CVE-2017-0144
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server

Publication date: 2017-03-17

Last updated on: 2025-04-04

Assigner: [email protected]

Description
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka "Windows SMB Remote Code Execution Vulnerability." This vulnerability is different from those described in CVE-2017-0143, CVE-2017-0145, CVE-2017-0146, and CVE-2017-0148.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Affected Vendors & Products
Vendor Product Version
microsoft server_message_block *
microsoft windows_10_1511 *
microsoft windows_7 *
microsoft windows_8.1 to 6.3.9600.20520 (inc)
microsoft windows_server_2008 *
microsoft windows_server_2012 *
microsoft windows_vista *
siemens acuson_p300_firmware *
siemens acuson_p300_firmware *
siemens acuson_p300_firmware *
siemens acuson_p300_firmware *
siemens acuson_p300 *
siemens acuson_p500_firmware *
siemens acuson_p500_firmware *
siemens acuson_p500 *
siemens acuson_sc2000_firmware From 4.0 (inc) to 4.0e (exc)
siemens acuson_sc2000_firmware *
siemens acuson_sc2000 *
siemens acuson_x700_firmware *
siemens acuson_x700_firmware *
siemens acuson_x700 *
siemens syngo_sc2000_firmware From 4.0 (inc) to 4.0e (exc)
siemens syngo_sc2000_firmware *
siemens syngo_sc2000 *
siemens tissue_preparation_system_firmware *
siemens tissue_preparation_system *
siemens versant_kpcr_molecular_system_firmware *
siemens versant_kpcr_molecular_system *
siemens versant_kpcr_sample_prep_firmware *
siemens versant_kpcr_sample_prep *
microsoft windows_server_2016 to 10.0.14393.7969 (inc)
microsoft windows_10_1607 to 10.0.14393.7969 (inc)
microsoft windows_server_2008 *
microsoft windows_rt_8.1 to 6.3.9600.20520 (inc)
microsoft windows_10_1507 to 10.0.10240.20978 (inc)
microsoft windows_server_2012 *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
Currently, no data is known.
AI Powered Q&A
Can you explain this vulnerability to me?


How can this vulnerability impact me?


How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?


What immediate steps should I take to mitigate this vulnerability?


Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
Meta Information
CVE Publication Date:
2017-03-17
CVE Last Modified Date:
2025-04-04
Report Generation Date:
2025-05-27
AI Powered Q&A Generation:
2024-11-28
EPSS Last Evaluated Date:
2025-03-31
NVD Report Link: